Sql Server 2022

sql_server_2022

Vendor: Microsoft • 166 CVEs

CVEs (166)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2026-67380 1Microsoft 4Sql Server 2017 Sql Server 2019Sql Server 2022+1 more Sep 16, 2026 Sep 8, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-67379 1Microsoft 3Sql Server 2019 Sql Server 2022Sql Server 2025 Sep 16, 2026 Sep 8, 2026 N/A· v4 8.5 HIGH· v3 N/A· v2 Stack-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-67378 1Microsoft 3Sql Server 2019 Sql Server 2022Sql Server 2025 Sep 17, 2026 Sep 8, 2026 N/A· v4 9.0 CRITICAL· v3 N/A· v2 Untrusted pointer dereference in SQL Server allows an unauthorized attacker to execute code over a network.
CVE-2026-67376 1Microsoft 4Sql Server 2017 Sql Server 2019Sql Server 2022+1 more Sep 16, 2026 Sep 8, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 Integer overflow or wraparound in SQL Server allows an unauthorized attacker to deny service over a network.
CVE-2026-67370 1Microsoft 4Sql Server 2017 Sql Server 2019Sql Server 2022+1 more Sep 16, 2026 Sep 8, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-67368 1Microsoft 4Sql Server 2017 Sql Server 2019Sql Server 2022+1 more Sep 15, 2026 Sep 8, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Improper link resolution before file access ('link following') in SQL Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-66820 1Microsoft 4Sql Server 2017 Sql Server 2019Sql Server 2022+1 more Sep 16, 2026 Sep 8, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-66819 1Microsoft 4Sql Server 2017 Sql Server 2019Sql Server 2022+1 more Sep 16, 2026 Sep 8, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-66818 1Microsoft 4Sql Server 2017 Sql Server 2019Sql Server 2022+1 more Sep 16, 2026 Sep 8, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Improper privilege management in SQL Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-66816 1Microsoft 2Sql Server 2022 Sql Server 2025 Sep 16, 2026 Sep 8, 2026 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Insufficient logging in SQL Server allows an authorized attacker to bypass a security feature over a network.
CVE-2026-66814 1Microsoft 4Sql Server 2017 Sql Server 2019Sql Server 2022+1 more Sep 16, 2026 Sep 8, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-47297 1Microsoft 3Sql Server 2019 Sql Server 2022Sql Server 2025 Oct 2, 2026 Sep 8, 2026 N/A· v4 8.1 HIGH· v3 N/A· v2 Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network.
CVE-2026-47295 1Microsoft 5Sql Server 2016 Sql Server 2017Sql Server 2019+2 more Jul 22, 2026 Jul 14, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-55002 1Microsoft 5Sql Server 2016 Sql Server 2017Sql Server 2019+2 more Aug 4, 2026 Jul 14, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 External control of file name or path in SQL Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-54118 1Microsoft 5Sql Server 2016 Sql Server 2017Sql Server 2019+2 more Aug 20, 2026 Jul 14, 2026 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network.
CVE-2026-54117 1Microsoft 5Sql Server 2016 Sql Server 2017Sql Server 2019+2 more Aug 20, 2026 Jul 14, 2026 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network.
CVE-2026-47296 1Microsoft 5Sql Server 2016 Sql Server 2017Sql Server 2019+2 more Aug 4, 2026 Jul 14, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-40370 1Microsoft 5Sql Server 2016 Sql Server 2017Sql Server 2019+2 more Jun 18, 2026 May 12, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 External control of file name or path in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-33120 1Microsoft 5Sql Server 2016 Sql Server 2017Sql Server 2019+2 more Jul 24, 2026 Apr 14, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Untrusted pointer dereference in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-32176 1Microsoft 5Sql Server 2016 Sql Server 2017Sql Server 2019+2 more Oct 14, 2026 Apr 14, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges locally.

Previous 1 234 5...9 Next